ScanMalware.com

Security Scan Report: 111-4ks.pages.dev

Redirected to: https://111-4ks.pages.dev/

Site favicon
Submitted: Feb 28, 2026, 7:04:43 AMCompleted: Feb 28, 2026, 7:06:01 AMpubliccompleted
Loading additional data...

Summary

This website contacted 14 IPs in 4 countries across 14 domains to perform 56 HTTP transactions. The main domain is 111-4ks.pages.dev and was registered NaN years ago.

Submitted URL: http://111-4ks.pages.dev/

Effective URL: https://111-4ks.pages.dev/Redirected

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

The site mimics Speedtest by Ookla but is hosted on an unrelated subdomain; no credential collection, moderate risk.

Risk Factors
Brand impersonation: brand name used on a non‑official, unranked domain
Subdomain on free hosting platform with unknown creation date
Unranked domain (not in Cisco Umbrella top 1M) increases suspicion
Safety Factors
No forms collecting passwords, emails, or payment data
No malicious Indicators of Compromise detected
No JavaScript malware patterns identified
No network IDS alerts
Page loads over HTTPS (assumed from URL scheme)
Domain age information unavailable

Details

Page Title

Speedtest by Ookla - The Global Broadband Speed Test

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(42%)

Domain Information

The domain '111-4ks.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain '111-4ks'. The registrable portion 'pages' spans 5 characters containing two vowels alongside three consonants. Word splitting yields 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://111-4ks.pages.dev/

Page Load Overview

3.86s
Total Load Time
79
HTTP Requests
26
Domains
3.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:2,390 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software42% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
42%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14104.18.86.42United States
AS13335Cloudflare, Inc.
5141.95.98.65France
AS16276OVH SAS
5178.250.1.12Sweden
AS20940
523.56.202.65Frankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
5172.217.20.130United States
AS44788
554.204.127.232Unknown
AS16276
5142.251.127.84Unknown
AS13335
5142.251.143.106Unknown
AS14618
5146.75.122.219Unknown
AS16509
5100.51.160.175UnknownUnknown
7914--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1541408F162B8536D808B979DEF36A618770FE0A7F99649D5B79D8B644B83CE0EC03404

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:xSCEV6s4kl4s0xE6J/CgbcVKzoKeMXKLnpI6dDcPXE+ymj6aslNzlbsjq0Aok3aI:byX4bagbcVMaWUZD+3UbwnZ4MMM9s

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:195917:EQZBA3LBYEcEBEdljJCQOYACJMLCLADAkM8SwKgoTwQVFIhDhikQUIkgAQGFCXQIOQqSFkw0FGYJigbkA8KIwBicihkFIWOJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:6fbdfdfdfdfd1101
Perceptual Hash:aad533f10af522d1
Difference Hash:9935353131352161
Wavelet Hash:6f1b19193b1b0101
Color Hash:#c5879e

Other Hashes

Crop Resistant:2d2d2d2d2c2d2ded,9935353131352161

Scan History

Scan history not available

Unable to load historical scan data